CVE-2019-6213

HIGH

Description

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privileges.

References

http://www.securityfocus.com/bid/106739

https://support.apple.com/HT209443

https://support.apple.com/HT209446

https://support.apple.com/HT209447

https://support.apple.com/HT209448

https://www.exploit-db.com/exploits/46300/

Details

Source: MITRE

Published: 2019-03-05

Updated: 2019-03-06

Type: CWE-119

Risk Information

CVSS v2.0

Base Score: 9.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 8.6

Severity: HIGH

CVSS v3.0

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 1.8

Severity: HIGH